On Tue, Feb 21, 2017 at 6:32 PM, Yann Ylavic <ylavic....@gmail.com> wrote:
> On Tue, Feb 21, 2017 at 4:50 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >>> > >>> Header set Client-SAN "%{PeerExtList('2.5.29.17')}s" > > The syntax may be rather: > > Header set Client-SAN "expr=%{PeerExtList:2.5.29.17}" > > Does it work better? > Uf, no :-( I've mentioned above, this is with Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.1e-fips I was also trying the Header with expr=value, but then I noticed it's available in 2.4.10 and later